forked from github/kensanata.oddmuse
119 lines
3.8 KiB
Perl
119 lines
3.8 KiB
Perl
# Copyright (C) 2006-2018 Alex Schroeder <alex@gnu.org>
|
|
#
|
|
# This program is free software: you can redistribute it and/or modify it under
|
|
# the terms of the GNU General Public License as published by the Free Software
|
|
# Foundation, either version 3 of the License, or (at your option) any later
|
|
# version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful, but WITHOUT
|
|
# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
|
|
# FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License along with
|
|
# this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
require './t/test.pl';
|
|
package OddMuse;
|
|
use Test::More tests => 27;
|
|
|
|
$localhost = 'confusibombus';
|
|
$ENV{'REMOTE_ADDR'} = $localhost;
|
|
|
|
## Edit banned hosts as a normal user should fail
|
|
|
|
test_page(update_page('BannedHosts', "# Foo\n#Bar\n$localhost\n", 'banning me'),
|
|
'This page does not exist');
|
|
|
|
## Edit banned hosts as admin should succeed
|
|
|
|
test_page(update_page('BannedHosts', "#Foo\n#Bar\n$localhost\n", 'banning me', 0, 1),
|
|
"Foo",
|
|
$localhost);
|
|
|
|
## Edit banned hosts as a normal user should fail
|
|
|
|
test_page(update_page('BannedHosts', "Something else.", 'banning me'),
|
|
"Foo",
|
|
$localhost);
|
|
|
|
## Try to edit another page as a banned user
|
|
|
|
test_page(update_page('BannedUser', 'This is a test which should fail.', 'banning test'),
|
|
'This page does not exist');
|
|
|
|
## Try to edit the same page as a banned user with admin password
|
|
|
|
test_page(update_page('BannedUser', 'This is a test.', 'banning test', 0, 1),
|
|
"This is a test");
|
|
|
|
## Unbann myself again, testing the regexp
|
|
|
|
test_page(update_page('BannedHosts', "#Foo\n#Bar\n", 'banning me', 0, 1), "Foo", "Bar");
|
|
|
|
## Banning content, including a malformed regexp
|
|
|
|
# mafia is banned
|
|
update_page('BannedContent', "# cosa\nma ?fia # 2007-01-14 crime\n#nostra\n(huh?\n", 'one banned word', 0, 1);
|
|
test_page(update_page('CriminalPage', 'This is about http://mafia.example.com'),
|
|
'This page does not exist');
|
|
|
|
# error message is shown
|
|
test_page($redirect,
|
|
'banned text',
|
|
'wiki administrator',
|
|
'matched',
|
|
'See .*BannedContent.* for more information',
|
|
'Reason: crime');
|
|
|
|
# admin can override the ban
|
|
test_page(update_page('CriminalPage', 'This is about http://mafia.example.com',
|
|
undef, undef, 1),
|
|
"http://mafia.example.com");
|
|
|
|
sleep(1);
|
|
|
|
OpenPage('CriminalPage');
|
|
my $ts = $Page{ts};
|
|
|
|
# other edits are ok
|
|
test_page(update_page('CriminalPage', 'This is about http://nafia.example.com'),
|
|
"http://nafia.example.com");
|
|
|
|
# comments have no effect
|
|
test_page(update_page('CriminalPage', 'This is the http://cosa.example.com'),
|
|
"http://cosa.example.com");
|
|
|
|
# only match in urls
|
|
test_page(update_page('CriminalPage', 'This is about the mafia'),
|
|
'This is about the mafia');
|
|
|
|
# rollback to banned content requires admin
|
|
test_page(get_page("action=rollback to=$ts id=CriminalPage username=Alex"),
|
|
'Rolling back changes',
|
|
'Rollback of CriminalPage would restore banned content');
|
|
|
|
# it works with the correct password
|
|
test_page(get_page("action=rollback to=$ts id=CriminalPage pwd=foo"),
|
|
'Rolling back changes',
|
|
'CriminalPage</a> rolled back');
|
|
|
|
# make sure it also doesn't work in the homepage field for comments
|
|
AppendStringToFile($ConfigFile, "\$CommentsPrefix = 'Comments on ';\n");
|
|
|
|
# mafia is still banned
|
|
test_page(get_page(join(' ', 'title=Comments_on_CriminalPage',
|
|
'aftertext=Innocent',
|
|
'username=Alex',
|
|
'homepage=http://mafia.example.com')),
|
|
'Reason: crime');
|
|
|
|
# but it still works!
|
|
test_page(get_page(join(' ', 'title=Comments_on_CriminalPage',
|
|
'aftertext=Innocent',
|
|
'username=Alex',
|
|
'homepage=http://police.example.com')),
|
|
'Status: 302');
|
|
test_page(get_page('Comments_on_CriminalPage'),
|
|
'Innocent',
|
|
'http://police.example.com');
|